Privacy Policy
Last updated: October 25, 2026
This Privacy Policy and Disclosure Notice is prepared by COREHU INTERACTİVE CLOUD SUPPLY YAZILIM SİSTEMLERİ LİMİTED ŞİRKETİ ("CoreHu") as data controller under Law No. 6698 on the Protection of Personal Data ("KVKK") and applies to users of the corehu.com Platform.
01
Data Controller
Data controller: COREHU INTERACTİVE CLOUD SUPPLY YAZILIM SİSTEMLERİ LİMİTED ŞİRKETİ ("CoreHu"). Contact: [email protected]; web: corehu.com.
02
Personal Data Processed
The following personal data is processed on the Platform:
- Identity data: name, surname, title (for legal entity usage)
- Contact data: email address, correspondence content in support requests
- Account and usage data: session records, rental and billing history, preferences
- Payment data: payment amount and transaction reference; card details are not stored by CoreHu and are processed by iyzico
- Security data: IP address, device and browser information, access and audit logs
03
Purposes and Legal Bases of Processing
Your personal data is processed for the establishment and performance of the contract, billing and payment tracking, ensuring account and Platform security, preventing abuse, fulfilling legal obligations, and technical support within the scope of legitimate interest.
No profiling is performed for marketing purposes. Messages sent to you are limited to notifications necessary for operating the service.
04
Retention Periods
Personal data is retained for as long as required by the purpose of processing. Once the purpose ceases to exist, the data is deleted, destroyed or anonymized, without prejudice to statutory bookkeeping, record and audit obligations.
05
Data Transfers and Cross-Border Transfers
GPU capacity providers (e.g. Vast.ai) may be established abroad. Data of the applications you run during a rental may be processed in the country where the allocated server is located. This transfer is necessary for the performance of the service and is carried out in compliance with Article 9 of the KVKK.
Payment data may be transferred to iyzico; email and infrastructure services may be transferred to related service providers as technical processors. Transfers are made in compliance with Articles 8 and 9 of the KVKK and, where required, via explicit consent or standard contract mechanisms.
06
AI Assistant Connections (MCP)
You can connect an AI assistant (for example ChatGPT or Claude) to your CoreHu account. On the consent screen you choose what the assistant may access: selected machines (status, GPU/CPU metrics, usage, SSH host and port), optionally your USD balance and, if you allow it, renting, stopping and starting machines within the limits shown.
CoreHu shares only the data you selected with the assistant provider, only when the assistant calls a tool, and keeps a log of each call (tool, time, outcome) for security. Each rental requested by an assistant is shown to you first and needs your confirmation; the assistant cannot add funds or make payments.
Connections expire after 30 days and can be revoked at any time under Console → Keys → AI connections; revoking stops access immediately. Data shared with the assistant is processed by the assistant provider under its own privacy policy and may be transferred abroad for that purpose.
07
Data Subject Rights (KVKK Art. 11) and Application
Under Article 11 of the KVKK you have the right to: learn whether your personal data is processed; request information if it is processed; learn the purpose of processing and whether it is used in accordance with that purpose; know the third parties to whom it is transferred domestically or abroad; request rectification if it is processed incompletely or inaccurately; request deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK; request notification of rectification and deletion operations to third parties to whom the data has been transferred; object to a result arising against you through analysis of processed data exclusively by automated systems; and claim compensation for damages.
You may submit your applications in accordance with Article 13 of the KVKK to [email protected]. Applications that comply with the required form are answered free of charge within at most 30 days.
08
Cookies
The Platform uses cookies strictly necessary for session management and a language/preference cookie; no analytics or marketing cookies are used. For details, see the Cookie Policy page.
09
Security Measures
CoreHu implements appropriate technical and administrative measures to protect personal data: access authorization, encryption, network security, least-privilege principle, staff awareness and incident response procedures.